72eeb24cd7
- Replaced all client-facing $e->getMessage() with generic error messages - Added error_log() with filename prefix to all catch blocks - Covered jsonError(), echo, and json_encode() response patterns - Also fixed 2 remaining display_errors=1 and add_invoice.php leak - Script-assisted fix for 75 files, manual fix for 12 remaining edge cases
42 lines
1.0 KiB
PHP
42 lines
1.0 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../connect.php';
|
|
|
|
// Get the values from the request
|
|
$phones = filterRequest("phones");
|
|
$name = filterRequest("name");
|
|
$phones2 = filterRequest("phones2");
|
|
|
|
// Check if required fields are provided
|
|
if (empty($phones)) {
|
|
jsonError($message = "Phone number is required.");
|
|
exit();
|
|
}
|
|
|
|
// Prepare the SQL query to insert data into contactEgypt
|
|
$sql = "INSERT INTO `contactEgypt`(`phones`, `name`, `phones2`) VALUES (
|
|
:phones,
|
|
:name,
|
|
:phones2
|
|
)";
|
|
|
|
$stmt = $con->prepare($sql);
|
|
$stmt->bindParam(':phones', $phones);
|
|
$stmt->bindParam(':name', $name);
|
|
$stmt->bindParam(':phones2', $phones2);
|
|
|
|
try {
|
|
$stmt->execute();
|
|
if ($stmt->rowCount() > 0) {
|
|
// Print a success message
|
|
jsonSuccess($message = "Contact data saved successfully");
|
|
} else {
|
|
// Print a failure message
|
|
jsonError($message = "Failed to save contact data");
|
|
}
|
|
} catch (PDOException $e) {
|
|
// Print error message
|
|
error_log("[add.php] " . $e->getMessage());
|
|
jsonError($message = "Database error occurred");
|
|
}
|
|
?>
|